Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/MFwBXk7Zyc3DP2blxL9gn7jW_OQ.roa
File:                     MFwBXk7Zyc3DP2blxL9gn7jW_OQ.roa (raw, json)
Hash identifier:          Vnq8RX3sz2+9RfaAj8lGBMb8x9rT8t/hd1exkQjyIaY=
Subject key identifier:   30:5C:01:5E:4E:D9:C9:CD:C3:3F:66:E5:C4:BF:60:9F:B8:D6:FC:E4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0178
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MFwBXk7Zyc3DP2blxL9gn7jW_OQ.roa
Signing time:             Fri 07 Jul 2023 04:10:42 +0000
ROA not before:           Fri 07 Jul 2023 04:10:42 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.120.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:42 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=305C015E4ED9C9CDC33F66E5C4BF609FB8D6FCE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:1c:ae:dc:0b:6d:5e:65:7b:03:e5:9e:96:
                    db:a5:33:73:90:cc:8c:f3:63:c8:83:81:fa:c9:e2:
                    92:01:6f:75:90:99:43:51:9e:4d:85:d2:ca:86:f2:
                    0f:20:5f:33:27:88:1d:7f:80:8e:5a:c5:25:5c:6f:
                    3f:8e:86:08:da:31:18:55:c0:3c:37:8c:79:97:2a:
                    22:39:ed:83:f6:93:4e:58:26:34:d9:0f:8c:62:a6:
                    63:7b:8a:39:e0:1e:99:76:bb:d2:be:6b:5d:64:12:
                    83:ac:ae:7f:fc:6c:4f:07:82:33:50:fd:c2:05:80:
                    d2:00:43:e0:86:d2:e5:ed:9e:30:0b:63:fd:64:e0:
                    67:90:76:0f:a0:f3:7d:ee:ce:ac:6d:29:e9:2e:13:
                    f9:47:ed:b7:63:cb:10:d7:1d:15:85:fd:7a:e5:7f:
                    40:87:bd:76:52:b1:08:74:ea:8b:64:94:ff:d0:e8:
                    2c:78:af:e5:9b:79:60:cb:da:e7:08:cc:bd:a7:b6:
                    91:ae:bc:e2:2d:99:33:6f:44:58:31:09:b3:6b:90:
                    86:44:30:e2:20:9a:59:52:ca:eb:1d:b7:35:a4:e5:
                    1c:9d:2d:65:99:b0:51:c2:59:bc:21:f4:13:af:c2:
                    24:62:ad:b3:dd:8f:9c:f8:93:c2:5d:40:19:29:4d:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:01:5E:4E:D9:C9:CD:C3:3F:66:E5:C4:BF:60:9F:B8:D6:FC:E4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/MFwBXk7Zyc3DP2blxL9gn7jW_OQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:02:ca:7d:5c:b0:8a:04:3c:fe:a8:83:9a:8d:66:b6:f8:6d:
         d6:cf:0c:90:1f:8f:e0:de:c6:2e:36:85:b1:bf:21:ee:01:3a:
         99:04:e3:8b:75:a2:f1:66:80:eb:b8:17:25:ce:04:6b:e3:de:
         f5:92:97:3f:71:d5:f5:4d:1f:12:e1:60:53:81:d1:c6:fd:fe:
         61:7d:0f:c9:39:3f:6b:66:8b:f7:ce:59:8d:22:88:46:50:2c:
         d0:10:84:6c:11:a6:9b:74:ae:c4:d5:84:51:bf:d6:6c:e5:b4:
         0c:9b:b9:e4:67:8a:8a:a1:40:d2:55:fd:d6:80:a4:91:c2:cb:
         6d:a0:ca:79:3b:90:46:da:b8:e0:e2:92:81:64:fb:29:9f:f2:
         d1:5d:48:fc:5d:60:07:df:ee:5c:fe:79:fb:f8:b6:16:23:36:
         b2:81:1d:ed:e2:c9:ab:54:d5:28:97:94:ee:3f:99:f2:58:83:
         9b:9c:f5:f3:56:8a:6a:40:f8:1d:71:d2:5a:97:53:cc:c9:df:
         73:7e:da:69:46:1e:b8:31:f0:6f:d2:34:5a:7f:32:cf:57:d5:
         a8:77:94:a3:09:9b:96:02:48:60:23:e7:d0:e8:e6:1f:62:3b:
         38:e6:a8:07:e8:c0:38:f2:a6:95:9e:1c:b5:05:17:fe:87:e4:
         36:25:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:53 2025 by rpki-client